in our experience, option #1 is generally preferable, since you'll fail the entire operation if the write to both SpiceDB and your primary don't succeed